Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/yI5Nbp0-uf0q4zk47pCiYdnE9hQ.roa
File: yI5Nbp0-uf0q4zk47pCiYdnE9hQ.roa (raw, json)
Hash identifier: BKzz9xX/v8G21Kss5sh+1KuOPfvgIR81jj3LRU4Atjw=
Subject key identifier: C8:8E:4D:6E:9D:3E:B9:FD:2A:E3:39:38:EE:90:A2:61:D9:C4:F6:14
Certificate issuer: /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial: 01942748737C9D94388C31879238D0FEF338
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/yI5Nbp0-uf0q4zk47pCiYdnE9hQ.roa
Signing time: Thu 02 Jan 2025 13:50:47 +0000
ROA not before: Thu 02 Jan 2025 13:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196818
IP address blocks: 37.202.32.0/21 maxlen: 21
37.202.40.0/23 maxlen: 23
37.202.42.0/23 maxlen: 23
37.202.46.0/23 maxlen: 23
217.73.240.0/20 maxlen: 20
217.73.240.0/23 maxlen: 23
217.73.242.0/23 maxlen: 23
217.73.244.0/22 maxlen: 22
217.73.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:73:7c:9d:94:38:8c:31:87:92:38:d0:fe:f3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Validity
Not Before: Jan 2 13:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c88e4d6e9d3eb9fd2ae33938ee90a261d9c4f614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3b:dc:ca:a3:f1:04:b2:96:99:d3:85:50:a9:
bc:6d:1e:72:ed:fd:ce:1e:88:fb:97:99:8b:8a:0f:
84:21:74:75:4c:89:24:4b:41:c1:eb:fb:fb:47:db:
2f:b6:b8:1c:4c:91:4c:bb:4b:85:de:79:42:45:52:
b9:ae:12:c2:8f:09:d7:1b:c2:4c:67:81:31:96:66:
8f:1f:e6:0d:c6:22:34:50:b1:9b:be:e8:be:a0:eb:
86:d3:ec:9c:07:4f:4b:fc:be:8b:16:2e:61:d0:28:
ed:25:17:b1:52:e6:79:96:95:07:56:4c:e0:66:23:
39:8f:f3:3b:9f:7a:92:b2:3e:59:38:ba:0d:6e:ef:
09:48:45:26:6f:59:61:1b:1e:0d:05:27:05:75:eb:
87:a8:e0:10:d1:52:15:b8:dd:13:6d:ef:e4:0a:de:
5d:9f:0f:0a:d2:b5:e4:48:37:f8:a1:c3:b7:c2:08:
38:67:33:03:35:94:9b:26:3e:19:19:78:be:ff:63:
8b:bd:86:c2:cd:0b:37:c8:4d:e6:f1:5e:2b:de:35:
dd:25:80:f8:8e:c2:95:b5:f7:58:33:c1:e0:f8:e9:
81:57:6c:f5:1f:f2:50:a0:37:a1:28:a0:15:f1:4b:
25:4b:6c:7f:29:c5:de:33:73:e4:99:84:82:fb:8d:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8E:4D:6E:9D:3E:B9:FD:2A:E3:39:38:EE:90:A2:61:D9:C4:F6:14
X509v3 Authority Key Identifier:
keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/yI5Nbp0-uf0q4zk47pCiYdnE9hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.32.0-37.202.43.255
37.202.46.0/23
217.73.240.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:de:a3:7b:4a:e1:7f:88:cd:4f:3c:b9:ea:71:78:bc:74:7b:
37:10:fb:65:15:40:69:30:13:91:82:67:e5:34:1a:c0:c6:4f:
ce:2e:6d:73:34:b4:b8:03:a3:81:43:f3:7e:c5:e6:90:02:0d:
7b:b3:c5:ef:bf:79:64:25:99:0a:2f:71:64:ac:f2:43:bf:c9:
c6:b5:b9:a3:95:f2:01:65:1f:04:d2:a0:d3:03:b1:e6:38:f0:
96:27:e5:09:50:0c:27:af:bf:69:14:54:9d:cd:86:24:56:c3:
6f:3b:92:8b:27:09:43:e1:62:e1:0d:05:a8:40:94:c9:ca:f0:
b5:58:87:3c:64:81:e7:2f:ee:a5:78:b8:d6:81:33:70:3d:9c:
d0:7f:96:64:8b:37:9a:0d:0c:6e:a1:5a:5f:5b:5a:79:98:15:
6a:0b:1f:cc:6f:76:af:41:d0:85:89:72:15:88:11:e2:21:82:
40:bf:29:9c:76:6d:f2:41:d6:c3:46:0b:b8:3e:71:19:b5:e4:
bd:bb:ff:4f:bb:84:5b:13:26:59:53:11:7d:0d:af:65:22:69:
87:e6:01:34:6d:82:1a:0d:58:84:ee:93:5f:71:b4:d2:5d:5d:
ca:5b:e4:27:9b:e8:01:ba:41:d6:f5:2b:ce:d0:14:01:fb:bc:
fd:99:46:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:13 2025 by rpki-client